#!/bin/sh
#
# Copyright 2005 Paul Blazejowski and Zach Borgerding <zborgerd@gmail.com>
# Available under the terms of the GNU GPL.
#
NAME="pam"
VERSION="0.99.6.2"
REVISION="1"
REDHAT_VERSION="2"
PKG_SOURCEURL='http://www.kernel.org/pub/linux/libs/pam/pre/library/Linux-PAM-$VERSION.tar.bz2'
PKG_SOURCEMD5=''
PKG_DISABLESMP="yupyup"
PKG_PATCH[0]="pam-0.99.3.0-cracklib-try-first-pass.patch"
PKG_PATCH[1]="pam-0.99.3.0-tally-fail-close.patch"
PKG_PATCH[2]="pam-0.99.4.0-dbpam.patch"
PKG_PATCH[3]="pam-0.99.5.0-redhat-modules.patch"
PKG_PATCH[4]="pam-0.99.6.0-succif-session.patch"
PKG_PATCH[5]="pam-0.99.6.2-dropline-50-default.perms.patch"
# Not really "patches" here. Just keeping the extra build stuff in the package.
PKG_PATCH[6]="doinst.sh"
PKG_PATCH[7]="config-util.5"
PKG_PATCH[8]="config-util.pamd"
PKG_PATCH[9]="dlopen.sh"
PKG_PATCH[10]="other.pamd"
PKG_PATCH[11]="pam-redhat-0.99.6.2-2.tar.bz2"
PKG_PATCH[12]="system-auth.5"
PKG_PATCH[13]="system-auth.pamd"
. $DLG_ROOT/config
. $DLG_ROOT/SCRIPTS/dropline-functions.sh
cflags
cxxflags
export CFLAGS="-fPIC"
PKG_NEEDSTATIC=1
prepare
spewdo "cd $PKG_SRCROOT"
findpatch filename pam-redhat-$VERSION-$REDHAT_VERSION.tar.bz2
spewdo "tar xjf $filename"
echo "Yay for patches!"
applypatch 0 1
applypatch 1 1
applypatch 2 1
applypatch 3 1
applypatch 4 0
applypatch 5 1
# Let's copy the PAM module README files to /usr/doc/pam-$VERSION/
mkdir -p $PKG_STAGEROOT$PKG_PREFIX/doc/pam-$VERSION/
for readme in modules/pam_*/README ; do
cp -f ${readme} $PKG_STAGEROOT$PKG_PREFIX/doc/pam-$VERSION/README.`dirname ${readme} | sed -e 's|^modules/||'`
done
analyzesource
# Non threaded build of BDB
(
TOPDIR=$DLG_WORKROOT/pam-instroot
if [ -d $DLG_WORKROOT/pam-instroot ]; then
rm -rf $DLG_WORKROOT/pam-instroot
fi
createdir $TOPDIR/lib64
PKG_BUILDDIR="build_unix"
PKG_SRCREL="../dist"
NAME="db"
VERSION="4.3.29"
PKG_SOURCEURL='http://download.oracle.com/berkeley-db/$NAME-$VERSION.tar.gz'
. $DLG_ROOT/config
. $DLG_ROOT/SCRIPTS/dropline-functions.sh
cflags
cxxflags
PKG_NEEDSTATIC=1
prepare
analyzesource
spewdo "echo db_cv_mutex=UNIX/fcntl > $PKG_WORKROOT/$NAME-$VERSION/$PKG_BUILDDIR/config.cache"
configure -C \
--disable-compat185 \
--disable-cxx \
--disable-diagnostic \
--disable-dump185 \
--disable-java \
--disable-rpc \
--disable-tcl \
--disable-shared \
--with-pic \
--with-uniquename=_pam \
--with-mutex="UNIX/fcntl" \
--prefix=$TOPDIR \
--includedir=$TOPDIR/include \
--libdir=$TOPDIR/lib64
make
PKG_DESTDIRVAR=$TOPDIR
makeinstall
cleanup
)
# And finally we're building PAM, yay!
TOPDIR=$DLG_WORKROOT/pam-instroot
CPPFLAGS=-I$TOPDIR/include ; export CPPFLAGS
export LIBNAME="lib64"
LDFLAGS=-L$TOPDIR/lib64 ; export LDFLAGS
# autoconf is needed due to our pacheroos
autoreconf
configure --libdir=/lib64 \
--enable-static-libpam \
--enable-fakeroot=$PKG_STAGEROOT \
--enable-isadir=../../lib64/security
# Python stuff in docs gives sandbox problems
sed -i -e 's|modules doc examples|modules|' Makefile
sed -i -e "s:^HAVE_NDBM_H=yes:HAVE_NDBM_H=no:" \
-e "s:^HAVE_LIBNDBM=yes:HAVE_LIBNDBM=no:" \
Make.Rules
make
make check
make install DESTDIR=$PKG_STAGEROOT LDCONFIG=""
# Forcibly strip binaries.
spewdo "strip $PKG_STAGEROOT/sbin/*"
# /sbin/unix_chkpwd has to be set setgid shadow, or else apps that use
# it, like xscreensaver, cannot auth when checking the password.
spewdo "chown root.shadow $PKG_STAGEROOT/sbin/unix_chkpwd"
spewdo "chmod 2755 $PKG_STAGEROOT/sbin/unix_chkpwd"
# /sbin/pam_timestamp_check needs to be setuid root, or it throws errors.
spewdo "chown root.root $PKG_STAGEROOT/sbin/pam_timestamp_check"
spewdo "chmod 4755 $PKG_STAGEROOT/sbin/pam_timestamp_check"
createdir $PKG_STAGEROOT/etc/pam.d
findpatch filename other.pamd
spewdo "cp $filename $PKG_STAGEROOT/etc/pam.d/other"
findpatch filename system-auth.pamd
spewdo "cp $filename $PKG_STAGEROOT/etc/pam.d/system-auth"
# Install man pages.
install -d -m 755 $PKG_STAGEROOT$PKG_PREFIX/man/man{3,5,8}
install -m 644 doc/man/*.3 $PKG_STAGEROOT$PKG_PREFIX/man/man3
install -m 644 doc/man/*.5 $PKG_STAGEROOT$PKG_PREFIX/man/man5
install -m 644 doc/man/*.8 $PKG_STAGEROOT$PKG_PREFIX/man/man8
# We'll make all of this prettier later on... Copying over the module
# manfiles as well... There are no module man3's, so we won't bother.
install -m 644 modules/pam_*/*.5 $PKG_STAGEROOT$PKG_PREFIX/man/man5
install -m 644 modules/pam_*/*.8 $PKG_STAGEROOT$PKG_PREFIX/man/man8
# And a few we use for pam.d configs.
install -m 644 $DLG_COREREPOS/$NAME/*.5 $PKG_STAGEROOT$PKG_PREFIX/man/man5
# Let's first remove that pam_selinux module dir because we don't use it,
# and its presence breaks our module checks.
echo "Removing pam_selinux"
spewdo "rm -rf $PKG_BUILDROOT/modules/pam_selinux"
# Let's do the same thing for pam_keyinit and pam_namespace until we figure out
# why they won't build.
echo "Removing pam_keyinit and pam_namespace"
spewdo "rm -rf $PKG_BUILDROOT/modules/pam_keyinit"
spewdo "rm -rf $PKG_BUILDROOT/modules/pam_namespace"
# Make sure every module subdirectory gave us a module. Yes, this is hackish.
for dir in modules/pam_* ; do
if [ -d ${dir} ] ; then
if ! ls -1 $PKG_STAGEROOT/lib64/security/`basename ${dir}`*.so ; then
echo ERROR `basename ${dir}` did not build a module.
die "Module missing"
fi
fi
done
# Kill duplicate doc file sets.
spewdo "rm -fr $PKG_STAGEROOT$PKG_PREFIX/doc/Linux-PAM $PKG_STAGEROOT$PKG_PREFIX/share/doc/pam"
# Check for module problems. Specifically, check that every module we just
# installed can actually be loaded by a minimal PAM-aware application.
for module in $PKG_STAGEROOT/lib64/security/pam*.so ; do
if ! $DLG_COREREPOS/$NAME/dlopen.sh -lpam -ldl ${module} ; then
die "Could not load module"
fi
# And for good measure, make sure that none of the modules pull in threading
# libraries, which if loaded in a non-threaded application, can cause Very
# Bad Things to happen.
if env LD_PRELOAD=$PKG_STAGEROOT/lib64/libpam.so ldd -r ${module} | fgrep -q libpthread ; then
die "Module pulled in threading lib"
fi
done
tidydocumentation
analyzebinaries
finalizepackage
packagize
removedir $TOPDIR
cleanup